OPIE considered insecure

[Dag-Erling Smørgrav]

Daniel Roethlisberger <daniel at roe.ch> writes:
> Your statement is of course correct, logging in from untrusted
> machines can never be secure.  However, OPIE still raises the bar
> on the required capabilities for an attack (active, real-time
> attack versus passive keylogging / data dumping).

This conversation reminds me of a flipchart outside the terminal room at
an early BSDCon, with a list of passwords sniffed from the network and
something like "if your password is listed below, you should consider
using SSH" :)

DES
-- 
Dag-Erling Smørgrav - des at des.no